Sophos
Threat Analyst 1
- Location
- India
- Work mode
- Remote
- Experience
- 2+ yrs exp
- Pay
- ₹6–12 LPA (Est.)
- Type
- Full-time job, Developer
- Added
- 5 November 2026
About this role
Sophos is a cybersecurity company that provides managed detection and response (MDR) and other security products to organisations worldwide. As a Threat Analyst 1 on the MDR team, you monitor customer environments and respond to cyber threats alongside threat hunters, incident responders and engineers. Daily work involves analysing logs and security events in Sophos tools, identifying threats and documenting findings for customers. You also follow up with customers until issues are resolved and research new indicators of compromise and vulnerabilities. The service runs 24x7, so the role includes work outside business hours, weekends and holidays. It is a remote role in India suited to someone with at least two years of SOC or security team experience.
Sophos is hiring for Threat Analyst 1, a full-time role based in India (remote).
Who can apply: 2+ yrs exp. Skills: SOC operations, Threat hunting, MITRE ATT&CK, Windows event log analysis, SIEM / SQL / PowerShell.
Hirastra checked that this opening is live. Apply directly through the official posting; applying is always free.
What you'll do
- Investigate logs and security events using Sophos tooling
- Identify and respond to cyber threats in customer environments
- Document and communicate findings to technical and executive audiences
- Follow up with customers to resolution and recommend risk reductions
- Research emerging indicators of compromise, exploits and vulnerabilities
What you need
- Minimum 2 years in a SOC or computer security team
- Experience with threat hunting and endpoint/network security monitoring
- Experience administering Windows plus Apple or Linux operating systems
- Knowledge of MITRE ATT&CK, adversary techniques and incident response procedures
- Basic understanding of network traffic and Windows event log analysis
- Willingness to work outside business hours, including weekends and holidays
Skills
- SOC operations
- Threat hunting
- MITRE ATT&CK
- Windows event log analysis
- SIEM / SQL / PowerShell
"Est." = Hirastra's estimate based on market data, not an official figure.
All Sophos jobs and internships
More like this: Cyber security jobs for freshers, Work from home IT jobs and internships, Software developer jobs
Similar openings
See all jobs- SIEM
- Splunk
- Sentinel
- EDR/XDR
- Incident response
- MITRE ATT&CK
Location: Mumbai, Onsite
Experience: 2–5 yrs exp
Est. ₹10–18 LPA
Added
Bloomreach
Associate Security Analyst
- SIEM
- SOAR
- EDR
- AWS
- GCP
- Vulnerability Management
Location: India, Remote
Experience: 2+ yrs exp
Est. ₹6–12 LPA
Added
Deloitte
Consultant, Cyber (ISO 27001)
- ISO 27001
- Information security
- Risk assessment
- Security audits
- Data privacy
Location: Bengaluru
Experience: 2+ yrs exp
Est. ₹9–16 LPA
Added
SISA Infosec
Application Security Associate Consultant
- Penetration testing
- Burp Suite
- OWASP Top 10
- Secure code review
- Nmap
Location: Bangalore
Experience: 2–4 yrs exp
Est. ₹5–9 LPA
Added
- UVM
- SystemVerilog
- ARM Architecture
- CPU Verification
- SoC
Location: Bengaluru
Experience: 2+ yrs exp
Est. ₹20–35 LPA
Added
CME Group
IT Compliance & Controls Analyst II
- Python
- IT audit
- Security risk assessment
- AI governance
- Compliance
Location: Bengaluru
Experience: 2+ yrs exp
Est. ₹10–18 LPA
Added